Privacy policy | Maja Laskowska

This page explains what personal data I collect, why, on what legal basis and for how long I keep it. It is the full notice required by the GDPR.

Who the controller is

The controller of your personal data is Maja Laskowska, running an energy-work practice in Gdańsk, Poland. For anything to do with your data, write to mayaneire@gmail.com.

I have not appointed a data protection officer, so all requests come straight to me.

What data I collect

your name (or first and last name, if you give it),
email address,
phone number, if you contact me on WhatsApp or give it to me for contact,
the content of the messages you send me,
session notes: the topic you bring and a record of what was released during the session, to the extent needed for your summary and any follow-up sessions.

I do not ask for health data and I do not need it for the work. If you choose to write about your health, I keep it on the same terms as the rest of our correspondence.

Why I process it and on what basis

Contact and booking: replying to your message, agreeing a time, the free intro call. Basis: Article 6(1)(b) GDPR (steps prior to entering a contract) and Article 6(1)(f) GDPR (legitimate interest: replying to you).
Running the session and writing the summary, including notes and the emailed list of released emotions. Basis: Article 6(1)(b) GDPR (performance of a contract).
Payments and accounting records. Basis: Article 6(1)(c) GDPR (legal obligation under Polish tax law).
Establishing, pursuing or defending legal claims. Basis: Article 6(1)(f) GDPR (legitimate interest).

Giving me your data is voluntary, but without a name and either an email address or a phone number I cannot book a session with you.

How long I keep it

Correspondence (email, WhatsApp, Messenger): up to 2 years from our last contact.
Session notes: up to 2 years from the last session.
Accounting documents: 5 years from the end of the calendar year in which the tax obligation arose, as required by Polish law.

After that I delete the data. You can ask me to delete correspondence and notes earlier at any time.

Who receives the data

I do not sell your data and I do not share it for marketing. It reaches only the service providers I need in order to contact you and run sessions:

Google Ireland Limited, for Gmail and Google Meet,
Meta Platforms Ireland Limited, for WhatsApp and Messenger, if you contact me that way,
an accounting office, if it handles my bookkeeping, limited to the data on accounting documents,
public authorities, where disclosure is required by law.

These providers may process data outside the European Economic Area. Where that happens, it is covered by the European Commission's standard contractual clauses and the additional safeguards those providers apply.

Your rights

You have the right to:

access your data and get a copy of it,
rectify data that is wrong or incomplete,
erase your data,
restrict processing,
data portability,
object to processing based on legitimate interest.

To use any of these rights, write to mayaneire@gmail.com. I reply within one month at the latest.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland.

Automated decisions and profiling

I do not make automated decisions about you and I do not profile your data.

Cookies and analytics

This website sets no cookies and uses no analytics tools, tracking pixels or advertising tags. I do not collect visitor statistics. If that ever changes, I will update this policy and describe exactly what is collected before any such tool goes live.

The server hosting the site may keep standard technical logs (IP address, request time) needed for it to run safely.

Changes to this policy

If I change how I work with data, I will update this document and change the date below.

Version dated 2 September 2026.